Known vulnerabilities in Oracle Retail Predictive Application Server

Vendor: Oracle
Software: Oracle Retail Predictive Application Server
Software CPE: cpe:2.3:a:oracle:oracle_retail_predictive_application_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 20
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Retail Predictive Application Server Oracle Retail Predictive Application Server is affected by 20 known vulnerabilities: 3 high, 12 medium, 5 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121709 - Improper input validation
CVE-2025-26333		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120100
SB20260120113
SB20260120120
and 7 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 98 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 - 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 136 more
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 - 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU75225 - Information Exposure Through Timing Discrepancy
CVE-2020-35168		 CWE-208 Low
No
No
 - 18.04.2023 SB20230418142
SB20230418169
SB20230418180
and 3 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 - 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Available
No
 - 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU48048 - Improper input validation
CVE-2019-3740		 CWE-20 Medium
No
No
 - 30.10.2020 SB2020103018
SB2020103032
SB2020103033
and 11 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 - 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 41 more
#VU21465 - Out-of-bounds read
CVE-2018-11058		 CWE-125 Medium
No
No
 - 01.10.2019 SB2018091402
SB2020012202
SB2020011462
and 12 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU12651 - Missing Authorization
CVE-2018-1258		 CWE-862 Low
No
No
 - 15.05.2018 SB2018051507
SB2019011705
SB2019080913
and 11 more